What this site collects
A data protection firm should show its own website’s data handling plainly. This is everything the site records, why, how long we keep it, and how you can opt out.
Last updated: 12 October 2026
- Visit statistics
Records which pages are visited, for how long, the type of device and browser, the approximate location (country and city), the site you came from and which buttons are pressed. It never records what you type into a form. We use it to see which pages help and which do not.
Kept for 14 months. How to opt out: Block or delete cookies for this site in your browser settings.
- Page-use recordings
Records how pages are scrolled and clicked, so we can fix pages that confuse people. Every field you can type into is masked, so the recording never sees what you enter. Recording is switched off on the Free Risk Score, the scoping tool and every form, and never runs on the data breach form.
Kept for no more than 12 months. How to opt out: Block or delete cookies for this site in your browser settings.
- LinkedIn posts and the Google map
Some pages show our LinkedIn posts, and the footer shows a small Google map. LinkedIn and Google may set their own cookies when these load. We do not receive what they collect.
Set by LinkedIn and Google under their own policies. How to opt out: Block or delete cookies in your browser.
- The Free Risk Score and “Which certification fits?”
Both are anonymous. For the check we keep a check ID, the track, industry group and seat, the question IDs with their level, whether each answer was right, the seconds taken, the score, the band and your rating. For the funnel we keep your answers and the result. No name, email or phone number is kept with either, unless you then send us a form.
Kept for 24 months to improve the questions. How to opt out: Nothing to opt out of: nothing identifies you.
- Forms you send us
Call-back, booking, breach alert, scoping, referral and “Email me my result”: we use these details only to reply to you or send what you asked for. Each form goes straight into our client records, and our team is told by email.
Kept in our client records under our Privacy policy. How to opt out: Ask our Data Protection Officer to see, correct or delete your details.
- PDPC Decision Brief (alerts)
Your email and the sector you chose. You confirm your address before the first email, and every email has a one-click unsubscribe link.
Kept until you unsubscribe. How to opt out: Unsubscribe from any brief.
- Our contact records
Our forms send your details and message straight to our contact records, so an adviser can reply. Several forms from you are kept as one record. The same system also sends our monthly bulletin, only to people who confirmed a sign-up.
Until you ask us to delete them, or two years after our last contact. How to opt out: Write to our Data Protection Officer.
- Emails we send
Sends your emailed check result. It sees your address and the email we send.
Delivery logs only, kept by the provider for a short period. How to opt out: Not needed: it only sends emails you asked for.
- Our monthly bulletin
Only if you confirmed a sign-up. We keep your email and sector, and every bulletin has a one-click unsubscribe link.
Until you unsubscribe; we act on it within 10 business days. How to opt out: Use the unsubscribe link in any bulletin.
- Our article publishing service (hosted CMS)
Holds the articles and images we publish. It records nothing about you.
Nothing about you is kept. How to opt out: Not needed.
More detail is in our Privacy policy. Questions: our Data Protection Officer, geachonglim@pdpacompliance.com.
Compliance is black and white. Your business isn’t.